Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 10:59:05.423 00:00:11.884 TCP 12.102.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:00:15.224 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.057 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.333 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.177 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.123 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.199 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:00:15.154 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:00:07.348 00:00:11.810 TCP 12.102.0.1:38210 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:01:09.199 00:00:11.820 TCP 12.102.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:02:11.073 00:00:11.810 TCP 12.102.0.1:35504 -> 1.101.0.1:3000 11 1507 1 2025-11-20 10:58:09.376 00:06:00.549 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:03:12.928 00:00:11.825 TCP 12.102.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:04:14.794 00:00:11.767 TCP 12.102.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:00:09.374 00:06:00.554 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:05:15.122 00:00:00.045 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.534 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.474 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.243 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.564 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.427 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:05:15.220 00:00:00.024 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:05:16.603 00:00:11.809 TCP 12.102.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:06:18.446 00:00:11.808 TCP 12.102.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:07:20.294 00:00:11.818 TCP 12.102.0.1:47268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:08:22.152 00:00:11.825 TCP 12.102.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:09:24.028 00:00:11.764 TCP 12.102.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:10:15.432 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.391 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.558 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.325 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.466 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:10:15.153 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:05:09.378 00:06:00.548 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:10:15.302 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:10:25.827 00:00:11.797 TCP 12.102.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:11:27.674 00:00:11.802 TCP 12.102.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:07:09.377 00:06:00.554 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:12:29.518 00:00:11.807 TCP 12.102.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:13:31.364 00:00:11.823 TCP 12.102.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:14:33.229 00:00:11.808 TCP 12.102.0.1:39148 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:15:17.152 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:15:17.233 00:00:00.046 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.152 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.173 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.275 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.151 00:00:00.023 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:15:17.115 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:15:35.079 00:00:11.807 TCP 12.102.0.1:53148 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:16:36.921 00:00:11.821 TCP 12.102.0.1:54564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:12:09.382 00:06:00.547 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:17:38.780 00:00:11.759 TCP 12.102.0.1:39762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:18:40.581 00:00:11.803 TCP 12.102.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:14:09.379 00:06:00.553 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:19:42.423 00:00:11.812 TCP 12.102.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:20:17.377 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.517 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.309 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.237 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.302 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.167 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:20:17.216 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:20:44.280 00:00:11.801 TCP 12.102.0.1:39044 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:21:46.122 00:00:11.805 TCP 12.102.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:22:47.970 00:00:11.808 TCP 12.102.0.1:53026 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:23:49.813 00:00:11.795 TCP 12.102.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:19:09.382 00:06:00.552 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:24:51.648 00:00:11.794 TCP 12.102.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:25:17.486 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.593 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.368 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.315 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.584 00:00:00.023 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.402 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:25:17.293 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:25:53.483 00:00:11.772 TCP 12.102.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:21:09.381 00:06:00.556 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:26:55.295 00:00:11.801 TCP 12.102.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:27:57.136 00:00:11.848 TCP 12.102.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:28:59.030 00:00:11.760 TCP 12.102.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:30:00.828 00:00:11.767 TCP 12.102.0.1:49256 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:30:17.472 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:30:17.514 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.707 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.392 00:00:00.022 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.496 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.615 00:00:00.021 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:30:17.650 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:26:09.394 00:06:00.542 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:31:02.637 00:00:11.803 TCP 12.102.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:32:04.480 00:00:11.765 TCP 12.102.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:28:09.390 00:06:00.548 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:33:06.282 00:00:12.595 TCP 12.102.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:34:08.917 00:00:11.779 TCP 12.102.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:35:17.586 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:35:17.647 00:00:00.024 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.487 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.609 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.714 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.579 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:35:17.349 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:35:10.734 00:00:11.804 TCP 12.102.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:36:12.579 00:00:11.761 TCP 12.102.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:37:14.396 00:00:11.825 TCP 12.102.0.1:48616 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:33:09.393 00:06:00.544 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:38:16.257 00:00:11.770 TCP 12.102.0.1:48206 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:39:18.083 00:00:11.801 TCP 12.102.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:35:09.390 00:06:00.550 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:40:17.711 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:40:17.626 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.588 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.619 00:00:00.023 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.733 00:00:00.023 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.741 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:40:17.702 00:00:00.021 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:40:19.930 00:00:11.819 TCP 12.102.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:41:21.782 00:00:11.797 TCP 12.102.0.1:47982 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:42:23.621 00:00:11.812 TCP 12.102.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:43:25.471 00:00:15.484 TCP 12.102.0.1:33746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:44:30.995 00:00:11.802 TCP 12.102.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:40:09.396 00:06:00.542 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:45:17.868 00:00:00.021 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.764 00:00:00.022 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.887 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.756 00:00:00.021 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.794 00:00:00.022 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.559 00:00:00.022 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:45:17.735 00:00:00.021 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:45:32.839 00:00:11.802 TCP 12.102.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:46:34.680 00:00:11.811 TCP 12.102.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:42:09.393 00:06:00.547 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:47:36.530 00:00:11.801 TCP 12.102.0.1:37318 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:48:38.375 00:00:13.289 TCP 12.102.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:49:41.700 00:00:11.804 TCP 12.102.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:50:17.929 00:00:00.022 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:50:18.202 00:00:00.022 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:50:17.999 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:50:18.142 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:50:17.952 00:00:00.022 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:50:18.036 00:00:00.024 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:50:18.086 00:00:00.044 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:50:43.543 00:00:11.770 TCP 12.102.0.1:48978 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:51:45.354 00:00:11.834 TCP 12.102.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:47:09.398 00:06:00.541 TCP 179.10.12.10:179 -> 179.10.12.12:58070 14 861 1 2025-11-20 11:52:47.227 00:00:12.242 TCP 12.102.0.1:59220 -> 1.101.0.1:3000 15 1926 1 2025-11-20 11:53:49.511 00:00:11.814 TCP 12.102.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:49:09.397 00:06:00.545 TCP 179.10.12.12:58070 -> 179.10.12.10:179 14 861 1 2025-11-20 11:54:51.364 00:00:11.785 TCP 12.102.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:55:18.362 00:00:00.023 ICMP 12.102.0.1:0 -> 5.0.198.2:0.0 3 252 1 2025-11-20 11:55:18.451 00:00:00.023 ICMP 12.102.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 11:55:18.321 00:00:00.021 ICMP 12.102.0.1:0 -> 4.0.198.2:0.0 3 252 1 2025-11-20 11:55:18.306 00:00:00.024 ICMP 12.102.0.1:0 -> 10.0.198.2:0.0 3 252 1 2025-11-20 11:55:17.771 00:00:00.025 ICMP 12.102.0.1:0 -> 2.0.198.2:0.0 3 252 1 2025-11-20 11:55:17.870 00:00:00.032 ICMP 12.102.0.1:0 -> 7.0.198.2:0.0 3 252 1 2025-11-20 11:55:18.284 00:00:00.023 ICMP 10.0.198.2:0 -> 12.102.0.1:8.0 3 252 1 2025-11-20 11:55:53.192 00:00:11.803 TCP 12.102.0.1:57336 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:56:55.056 00:00:11.786 TCP 12.102.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-11-20 11:57:56.885 00:00:12.669 TCP 12.102.0.1:56348 -> 1.101.0.1:3000 17 2241 1 Summary: total flows: 158, total bytes: 123503, total packets: 1124, avg bps: 274, avg pps: 0, avg bpp: 109 Time window: 2025-11-20 10:58:09 - 2025-11-20 11:58:09 Total flows processed: 158, passed: 158, Blocks skipped: 0, Bytes read: 16496 Sys: 0.0040s User: 0.0030s Wall: 0.0024s flows/second: 66750.6 Runtime: 0.0024s